Lucene search
GitHub_MCVE-2024-47071HistoryOct 01, 2024 - 4:15 p.m.
CVE-2024-47071
2024-10-0116:15:09
CWE-22
GitHub_M
web.nvd.nist.gov
2
CVSS3
6.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N
AI Score
6.4
Confidence
High
OSS Endpoint Manager is an endpoint manager module for FreePBX. OSS Endpoint Manager module activation can allow authenticated web users unauthorized access to read system files with the permissions of the webserver process. This vulnerability is fixed in 14.0.4.
Affected configurations
Node
freepbxcontactmanagerRange<14.0.4freepbx
| Vendor | Product | Version | CPE |
|---|---|---|---|
| freepbx | contactmanager | * | cpe:2.3:a:freepbx:contactmanager:*:*:*:*:*:freepbx:*:* |
CNA Affected
[
{
"vendor": "FreePBX",
"product": "security-reporting",
"versions": [
{
"version": "< 14.0.4",
"status": "affected"
}
]
}
]
CVSS3
6.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N
AI Score
6.4
Confidence
High
Related for CVE-2024-47071